Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/26609f-2700-4949-8dbe-bae1f77ba758/1/Q5rDiHgSfOzcTIPqae7h9OEYvP8.mft
File: Q5rDiHgSfOzcTIPqae7h9OEYvP8.mft (raw, json)
Hash identifier: U2iMweDh6l7gd6P230qa0Et4sqkdAKg/98aszUjECMk=
Subject key identifier: 58:4A:BF:24:71:BF:3E:1D:AD:28:99:05:A3:FC:23:FD:E7:42:61:9C
Authority key identifier: 43:9A:C3:88:78:12:7C:EC:DC:4C:83:EA:69:EE:E1:F4:E1:18:BC:FF
Certificate issuer: /CN=439ac38878127cecdc4c83ea69eee1f4e118bcff
Certificate serial: 019CAE6BE2F088A1C2333E80DD70E2C9CA2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q5rDiHgSfOzcTIPqae7h9OEYvP8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/26609f-2700-4949-8dbe-bae1f77ba758/1/Q5rDiHgSfOzcTIPqae7h9OEYvP8.mft
Manifest number: 0CD4
Signing time: Mon 02 Mar 2026 12:00:31 +0000
Manifest this update: Mon 02 Mar 2026 12:00:31 +0000
Manifest next update: Tue 03 Mar 2026 12:00:31 +0000
Files and hashes: 1: JMsELryrC71hTAcMzLYAc7CKRKk.roa (hash: rdsIPfGSMD6EsO8NTErhSi4I9C7O//GGQnV/svCoWHA=)
2: Q5rDiHgSfOzcTIPqae7h9OEYvP8.crl (hash: XOM/TDuy/PBPSfWlUdZymAKN7x3trxrJKMMI5kXpcZQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/26609f-2700-4949-8dbe-bae1f77ba758/1/Q5rDiHgSfOzcTIPqae7h9OEYvP8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/26609f-2700-4949-8dbe-bae1f77ba758/1/Q5rDiHgSfOzcTIPqae7h9OEYvP8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q5rDiHgSfOzcTIPqae7h9OEYvP8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:6b:e2:f0:88:a1:c2:33:3e:80:dd:70:e2:c9:ca:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=439ac38878127cecdc4c83ea69eee1f4e118bcff
Validity
Not Before: Mar 2 12:00:31 2026 GMT
Not After : Mar 3 12:00:31 2026 GMT
Subject: CN=584abf2471bf3e1dad289905a3fc23fde742619c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:73:ec:18:7f:b1:b5:42:dd:fe:57:6c:e4:ab:
26:c6:57:93:c3:57:97:0d:34:3d:2e:e2:67:28:00:
28:59:67:b0:db:fd:a7:3a:7b:35:d7:10:b6:1c:e6:
f4:c9:f0:e8:d1:c0:59:9a:9b:55:ca:6c:99:8b:01:
14:d6:29:2f:7e:0b:b2:ae:25:7a:f1:b1:aa:ee:61:
76:f5:c4:ec:80:58:e5:d4:19:9d:06:24:70:87:09:
39:f5:8f:bf:f5:69:31:f5:d6:a9:66:75:1e:e7:6f:
8a:3d:13:ac:a7:76:07:82:27:b9:ae:ae:08:b1:5f:
a4:64:78:47:a1:9d:11:68:cb:57:3c:42:0b:91:16:
d6:4e:93:ed:ed:b1:5d:d4:f2:2b:ab:14:45:84:32:
bc:da:bf:f2:dc:7e:92:18:8b:90:73:bd:02:09:f6:
d5:49:96:75:17:52:2f:6f:de:14:65:16:16:1b:01:
c7:ba:81:99:78:6d:4a:f5:5d:5c:15:ea:74:39:50:
47:71:cd:cc:10:c7:81:fd:8b:66:fa:61:6b:eb:e4:
06:eb:29:78:ea:46:24:62:58:3e:37:d2:1f:2e:c9:
89:a9:58:51:3a:4a:be:ea:6f:f7:3a:a3:86:25:4a:
03:29:9a:4d:f8:8b:0a:fa:9c:86:11:11:ed:15:87:
99:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:4A:BF:24:71:BF:3E:1D:AD:28:99:05:A3:FC:23:FD:E7:42:61:9C
X509v3 Authority Key Identifier:
keyid:43:9A:C3:88:78:12:7C:EC:DC:4C:83:EA:69:EE:E1:F4:E1:18:BC:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q5rDiHgSfOzcTIPqae7h9OEYvP8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/26609f-2700-4949-8dbe-bae1f77ba758/1/Q5rDiHgSfOzcTIPqae7h9OEYvP8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/26609f-2700-4949-8dbe-bae1f77ba758/1/Q5rDiHgSfOzcTIPqae7h9OEYvP8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:46:c1:23:83:4c:7f:07:04:1a:a9:7e:0c:90:9e:25:ed:d9:
36:db:64:b5:e1:c1:45:f2:83:fc:a7:67:29:e8:5e:e6:79:86:
7e:a3:ef:8e:62:fd:4a:09:ca:80:79:b0:45:cf:1a:6f:ad:4c:
3b:9b:a2:50:02:d5:df:7c:b9:8b:e9:8e:0c:2a:92:58:1a:87:
fe:cb:88:9d:5f:eb:51:cc:bf:0f:55:57:14:a1:49:c1:08:73:
fd:11:3e:46:20:51:74:88:2a:9b:dc:95:c4:c6:86:3d:bd:10:
b2:b6:95:61:b2:c4:b0:e5:63:75:ea:07:c4:ff:7a:d1:f2:3f:
cc:a6:dc:96:4d:3b:c2:4d:f8:1c:ef:66:55:62:14:a1:10:13:
a3:42:bf:0c:3d:9e:ad:78:15:84:1f:a6:40:96:21:1b:7b:97:
a4:b1:f9:dd:7d:71:01:ee:6d:ae:9c:94:e7:8b:eb:2b:65:84:
c9:d1:28:ac:b9:9c:ca:cc:c2:e3:4a:cf:89:73:e8:a3:11:ee:
0a:3d:c3:81:2d:7d:46:42:bd:d4:66:ca:52:f2:bd:b7:fb:f4:
d7:8a:8c:08:6e:4d:ab:6c:f1:77:a8:55:31:4e:9e:6d:22:23:
fc:e1:a3:26:e6:f9:b5:cc:ae:0b:68:a9:5a:d7:2c:9e:8e:b5:
2e:0a:0f:55
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyua+LwiKHCMz6A3XDiycotMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzOWFjMzg4NzgxMjdjZWNkYzRjODNlYTY5ZWVlMWY0ZTEx
OGJjZmYwHhcNMjYwMzAyMTIwMDMxWhcNMjYwMzAzMTIwMDMxWjAzMTEwLwYDVQQD
Eyg1ODRhYmYyNDcxYmYzZTFkYWQyODk5MDVhM2ZjMjNmZGU3NDI2MTljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtXPsGH+xtULd/lds5KsmxleTw1eX
DTQ9LuJnKAAoWWew2/2nOns11xC2HOb0yfDo0cBZmptVymyZiwEU1ikvfguyriV6
8bGq7mF29cTsgFjl1BmdBiRwhwk59Y+/9Wkx9dapZnUe52+KPROsp3YHgie5rq4I
sV+kZHhHoZ0RaMtXPEILkRbWTpPt7bFd1PIrqxRFhDK82r/y3H6SGIuQc70CCfbV
SZZ1F1Ivb94UZRYWGwHHuoGZeG1K9V1cFep0OVBHcc3MEMeB/Ytm+mFr6+QG6yl4
6kYkYlg+N9IfLsmJqVhROkq+6m/3OqOGJUoDKZpN+IsK+pyGERHtFYeZWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFhKvyRxvz4drSiZBaP8I/3nQmGcMB8GA1UdIwQY
MBaAFEOaw4h4Enzs3EyD6mnu4fThGLz/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUTVyRGlIZ1NmT3pjVElQcWFlN2g5T0VZdlA4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8yNjYwOWYtMjcwMC00OTQ5LThkYmUt
YmFlMWY3N2JhNzU4LzEvUTVyRGlIZ1NmT3pjVElQcWFlN2g5T0VZdlA4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy8yNjYwOWYtMjcwMC00OTQ5LThkYmUtYmFlMWY3N2JhNzU4
LzEvUTVyRGlIZ1NmT3pjVElQcWFlN2g5T0VZdlA4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAkbBI4NM
fwcEGql+DJCeJe3ZNttkteHBRfKD/KdnKehe5nmGfqPvjmL9SgnKgHmwRc8ab61M
O5uiUALV33y5i+mODCqSWBqH/suInV/rUcy/D1VXFKFJwQhz/RE+RiBRdIgqm9yV
xMaGPb0QsraVYbLEsOVjdeoHxP960fI/zKbclk07wk34HO9mVWIUoRATo0K/DD2e
rXgVhB+mQJYhG3uXpLH53X1xAe5trpyU54vrK2WEydEorLmcyszC40rPiXPooxHu
Cj3DgS19RkK91GbKUvK9t/v014qMCG5Nq2zxd6hVMU6ebSIj/OGjJub5tcyuC2ip
Wtcsno61LgoPVQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 15:32:20 2026 by rpki-client